Implementation method and application of security authentication function return value

Abstract

The application discloses a method for realizing a return value of a security authentication function and an application thereof. The method includes that the calling function and the called function pre-negotiate function return value expressions in different states; when the called function executes security authentication, it generates the return value of the function to be processed, and determines the shift random number according to the return value of the function to be processed ;The called function performs shift processing on the return value of the function to be processed according to the shift random number, obtains the final function return value, and returns the function return value to the calling function; The final function return value is analyzed to determine the state indicated by the function return value. The application method is used to realize a certain degree of interaction between the calling function and the called function during the calling operation, and the processed function return value cannot be easily identified, which ensures the safety of the function execution result and reduces the function return. Potential for the value to be tampered with on return.

Description

technical field [0001] The present application relates to the field of information security, in particular to a method and application for realizing a return value of a security authentication function. Background technique [0002] In common code writing, the return value of a function indicates success or failure, usually simple 0 and 1, or true and false. In the current code writing method based on security authentication functions, the Hamming distance is generally used for the return value of the function (used in the data transmission error control code, indicating that the number of corresponding bits of two words of the same length is different), that is, the return value of the function The corresponding bit values ​​in the value are opposite, such as 0x5A and 0xA5. [0003] However, considering the increasingly complex use environment and increasingly precise attack methods, in some code running scenarios with relatively high security requirements, the calling fun...

AI Technical Summary

Problems solved by technology

[0003] However, considering the increasingly complex use environment and increasingly precise attack methods, in some code running scenarios with relatively high security requirements, the calling function cannot determine the validity of the returned value of the called function (such as whether it is external intentional modification), in addition, the function caller and the called party have no interaction when performing the calling operation, so the reliability of the result returned by the called party is greatly reduced

Images